Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft
File:                     ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft (raw, json)
Hash identifier:          kwKQVSpUYm9O/d07hsQdc0s4zii7xSfEZfANBWKQzaE=
Subject key identifier:   DA:4F:DF:ED:FF:1E:F1:78:62:4B:7E:6E:93:8E:3E:DF:CB:95:B0:85
Authority key identifier: 8A:30:4A:F5:53:53:C0:31:46:F7:F3:A6:0C:6A:B5:80:4D:DA:5C:E1
Certificate issuer:       /CN=8a304af55353c03146f7f3a60c6ab5804dda5ce1
Certificate serial:       018F87487F1B9C34E44081F7DE18A16630CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijBK9VNTwDFG9_OmDGq1gE3aXOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:26 +0000
Manifest this update:     Fri 17 May 2024 16:00:26 +0000
Manifest next update:     Sat 18 May 2024 16:00:26 +0000
Files and hashes:         1: ZUauh0EqxNGadxiI-UTcMEyjQGQ.roa (hash: dOmGLxc86hJ/0GIAviVDr7N7kRm4l6s19CQUT3YJCbE=)
                          2: ijBK9VNTwDFG9_OmDGq1gE3aXOE.crl (hash: nuPahOpcidI2YjloLyUd4vWfMM7Ddry5hFC5YDV+ELM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijBK9VNTwDFG9_OmDGq1gE3aXOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:7f:1b:9c:34:e4:40:81:f7:de:18:a1:66:30:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a304af55353c03146f7f3a60c6ab5804dda5ce1
        Validity
            Not Before: May 17 16:00:26 2024 GMT
            Not After : May 18 16:00:26 2024 GMT
        Subject: CN=da4fdfedff1ef178624b7e6e938e3edfcb95b085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:1d:04:06:78:9e:e1:71:27:93:a9:50:25:
                    3c:23:ca:0c:56:6f:61:2b:03:ac:f8:48:31:2e:1d:
                    c3:5a:c7:9f:e9:0f:37:fe:ca:d3:67:f6:07:63:80:
                    bc:b2:a0:bc:72:53:d9:c6:94:dd:98:58:1f:62:0a:
                    f5:7c:8f:f6:1b:ed:f6:a0:29:17:72:dc:a8:7c:01:
                    73:55:b6:59:b4:ea:0a:3f:75:7c:9f:7a:8b:92:90:
                    bd:01:d3:98:1f:58:91:16:ea:ce:a3:46:21:d9:26:
                    e0:5f:d0:2e:2a:2c:72:fd:8c:bb:5a:cd:bf:27:7d:
                    ea:08:98:aa:11:d5:00:80:3c:24:8a:7d:d2:ef:81:
                    51:14:0f:28:fa:77:f9:70:a2:bd:74:dd:c1:bd:80:
                    b1:a4:1a:cd:f7:20:f2:00:8f:40:51:b0:a3:d8:55:
                    b2:3c:bf:58:cc:dc:fa:d6:a6:b9:e5:7f:1e:46:91:
                    a6:ac:60:3a:66:47:60:cf:41:8d:8b:76:d2:ae:8a:
                    df:56:42:58:79:c7:66:ae:c6:af:0b:ac:1e:ba:54:
                    43:8d:60:df:44:22:59:b6:7c:4e:b7:7c:06:35:cb:
                    a5:90:28:9e:a7:8e:48:f8:6d:7d:f9:86:70:68:91:
                    03:8e:cb:7b:89:60:ac:44:21:c0:9c:f5:33:b0:d7:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4F:DF:ED:FF:1E:F1:78:62:4B:7E:6E:93:8E:3E:DF:CB:95:B0:85
            X509v3 Authority Key Identifier:
                keyid:8A:30:4A:F5:53:53:C0:31:46:F7:F3:A6:0C:6A:B5:80:4D:DA:5C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijBK9VNTwDFG9_OmDGq1gE3aXOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:02:34:6a:85:1f:9b:ca:cd:e2:de:be:5c:21:e4:b8:de:0e:
         74:55:32:90:a2:1b:4e:0e:b6:5e:43:dc:8b:e1:1d:d0:99:e8:
         c2:8a:30:4b:34:5b:be:20:a8:00:93:8b:49:85:ff:d8:21:e2:
         0d:70:a4:44:d7:49:cf:b2:e8:a4:d9:6e:37:de:9b:5e:2d:48:
         35:e3:de:95:6a:48:cf:e9:66:f9:8c:c4:5b:db:44:f1:47:9c:
         2b:86:14:cd:c2:fc:e4:3f:f7:53:45:f1:3b:3d:ed:8c:ba:32:
         22:c2:09:39:fe:b4:86:8d:64:06:7e:7b:c4:87:17:20:b3:79:
         88:59:36:46:61:53:3c:92:93:3b:db:d7:0e:ab:25:98:f8:95:
         5e:f7:04:99:df:43:d8:d6:2d:46:43:61:f9:d9:b4:6c:b6:4b:
         17:64:72:d8:a9:5e:01:51:f3:11:73:63:c1:4e:0e:82:cd:07:
         1e:9c:04:35:c3:24:1d:0b:ab:5d:85:48:20:86:7f:45:65:c0:
         03:64:e6:dd:27:a7:80:1e:75:12:6f:a1:23:8f:18:04:1b:26:
         89:ea:e1:b7:55:97:c7:a5:d3:a0:69:c9:58:c4:a2:04:e1:77:
         96:24:02:02:9e:58:f5:70:06:ec:59:23:34:31:0d:30:ca:ed:
         0f:7c:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:30:16 2024 by rpki-client on console-fra.rpki-client.org